Privacy Policy

Last updated: 4 May 2026

1. Data controller

The data controller for personal data collected through myflipmood.com is:

FlipMood — Sole Proprietorship
VAT: IT 514413743
Address: available upon motivated request
Email: privacy@myflipmood.com

2. Data collected

We collect the following categories of personal data:

• Contact data: first name, last name, email address, phone number (optional).
• Shipping data: full postal address for order delivery.
• Payment data: we don't store them directly. Transactions are handled by our certified payment providers (Stripe, PayPal) according to PCI-DSS standards.
• Browsing data: IP address, browser, operating system, pages visited (collected via anonymous analytical cookies).
• Personal photos: only if you voluntarily send them for card customisation. They are used exclusively for that purpose and deleted after shipment.

3. Purposes and legal bases

We process your data for the following purposes:

Purpose	Legal basis	Retention
Order management	Contract execution	10 years (tax obligations)
Reply to requests	Legitimate interest	2 years
Newsletter (if subscribed)	Consent	Until unsubscription
Statistical analysis	Legitimate interest	26 months

4. Cookies

The site uses exclusively technical cookies (necessary for functioning) and anonymous analytical cookies (to understand how the site is used).

We do not use advertising, profiling or third-party cookies for commercial purposes. You can disable cookies in your browser settings without significant impact on browsing experience.

5. Sharing with third parties

Your data may be shared only with the following entities, exclusively for purposes functional to the service:

• Shipping carriers (DHL, UPS, FedEx) for order delivery.
• Payment providers (Stripe, PayPal) to process the transaction.
• Hosting provider (Netlify) for website publication.
• Email service for sending order confirmations.

All providers are GDPR compliant and signatories of data processing agreements. We do not sell, rent or transfer your data to third parties for commercial purposes.

6. Extra-EU data transfer

Some of our providers (e.g. Stripe, Netlify) are based in the United States. Such transfers take place in compliance with art. 46 GDPR, based on standard contractual clauses approved by the European Commission, with adequate safeguards for data protection.

7. Your rights

Pursuant to articles 15-22 of GDPR, you have the right to:

• Access: obtain confirmation of processing and a copy of your data.
• Rectification: correct inaccurate or incomplete data.
• Erasure (right to be forgotten): request deletion of your data.
• Restriction: request restriction of processing.
• Portability: receive your data in a structured and readable format.
• Objection: object to processing for legitimate reasons.
• Complaint: file a complaint with the Data Protection Authority (www.garanteprivacy.it).

To exercise your rights, write to privacy@myflipmood.com. We will reply within 30 days.

8. Data security

We adopt adequate technical and organisational measures to protect your data: HTTPS encryption throughout the site, restricted access to operational data, regular backups, internal privacy training. In case of data breach, we will notify you within 72 hours according to art. 33 GDPR.

9. Minors

FlipMood services are aimed at adults who buy for their own use or for their child. We do not knowingly collect data from minors under 14 years old. If you are a parent and believe your child has provided us with data without consent, contact us immediately.

10. Changes

We may update this policy. Any substantial changes will be communicated by email to registered users. The current version is always available on this page with the date of last update.